Maintain audit logs of physical access.

Ensure that only authorized persons have accessed your facilities. You can detect suspicious activity by reviewing when someone has accessed your facilities. An example of suspicious access is an employee entering the office late at night.

Maintain a written or digital record of who has entered your company's facility (e.g. your office). Require visitors to sign in at a sign in sheet when entering and exiting your facilities. Record employee access by securing doors with smart card readers. This allows you to track when and where an employee has entered your facilities.